Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: c0vq7RBLD6WFDRsFSGS1hjcm0W5ARSdgPcrS3yut0hc=
Subject key identifier: 2A:AF:31:51:DB:C2:E8:4D:23:31:78:43:44:B6:AC:61:FF:56:05:F5
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 0194BB9732EFA7694FFBDCBAEE5AEE31E7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 09:00:35 +0000
Manifest this update: Fri 31 Jan 2025 09:00:35 +0000
Manifest next update: Sat 01 Feb 2025 09:00:35 +0000
Files and hashes: 1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: /lz4b35545pUE1NExKzErY7t8DhYOeZ+dGsDiT58Iwc=)
3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:32:ef:a7:69:4f:fb:dc:ba:ee:5a:ee:31:e7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Jan 31 09:00:35 2025 GMT
Not After : Feb 1 09:00:35 2025 GMT
Subject: CN=2aaf3151dbc2e84d2331784344b6ac61ff5605f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:80:6f:a0:fd:c1:48:de:c8:46:8c:c7:fe:
3e:6b:c0:ca:8f:57:1e:a9:cd:41:4a:8d:6d:a4:ea:
3e:b3:ad:41:4c:aa:fc:b4:2e:24:29:25:71:13:d0:
64:ae:40:27:db:cc:d0:09:ca:1b:17:5c:32:93:3e:
4e:5b:6d:d5:16:2a:ac:15:95:09:98:cc:83:6a:ef:
5d:d9:17:3a:58:35:23:a2:b7:24:cb:15:57:b9:02:
fc:5c:3d:39:a8:67:f2:75:38:bc:01:0a:25:35:25:
ca:b9:e3:c2:5c:e9:03:93:17:1f:ab:bf:d9:e4:07:
d3:65:86:b4:e9:f4:fd:62:04:db:ea:4b:61:75:9b:
ab:b4:ff:3e:79:e7:b6:0b:90:7a:e4:00:80:cf:c9:
59:f2:93:3b:00:22:7b:04:bc:ce:71:15:37:f3:00:
cf:98:ee:25:5d:9e:cc:5a:01:98:38:82:47:73:35:
25:bb:d6:58:ab:5d:b7:f6:c4:6d:20:95:1c:58:82:
d5:13:e5:ef:0a:a6:9e:be:48:f4:f5:3c:a8:b2:ce:
e4:0a:d2:3d:0d:e4:15:e4:f0:45:3f:46:c4:1d:90:
da:fd:f6:27:b0:cf:2f:d2:0a:11:e9:8d:12:7d:82:
cf:50:b0:a0:e3:f0:42:56:98:76:33:1b:84:32:94:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AF:31:51:DB:C2:E8:4D:23:31:78:43:44:B6:AC:61:FF:56:05:F5
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:45:c3:ed:ad:35:4a:e9:f3:b9:4d:fa:1b:77:a5:49:6f:7c:
66:f6:c4:93:c7:d4:1c:3c:33:5b:9f:85:0b:9a:4b:62:ee:1e:
ee:d9:43:57:70:e7:6a:78:30:83:5f:30:7c:7a:51:2f:6e:98:
9a:a8:86:e4:05:2b:2a:3a:e3:ac:fa:fd:80:dd:04:76:77:8f:
79:b8:4c:1b:4a:54:c1:10:8a:9c:ee:49:48:69:e2:c9:09:0c:
52:ce:f7:d5:0c:2d:e5:54:0e:cf:ac:19:9f:5b:04:73:a9:29:
ad:cc:8a:e6:83:e0:7e:61:31:56:23:d6:9a:cd:ec:0a:0c:cd:
30:64:74:0b:7c:44:b2:71:fa:25:d3:92:4b:2a:a1:2f:5a:c9:
c6:79:54:22:81:f7:65:de:7f:3f:d5:b9:82:be:57:87:90:e2:
fa:86:fe:28:cb:da:53:52:7b:75:68:90:02:a1:27:d7:e6:e7:
83:b1:00:9c:bb:cb:ab:f1:3b:63:58:64:e1:f5:14:c5:1e:a7:
e1:3d:71:09:d3:9f:54:ba:84:28:ea:5c:55:af:50:ca:89:75:
1b:23:31:8b:18:a3:7e:0c:b8:7d:8b:2e:08:e7:a2:b7:3d:97:
f8:43:96:a3:32:8d:cc:69:b3:54:28:19:17:2f:0a:c4:e3:3e:
7a:d5:de:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:59 2025 by rpki-client on console-fra.rpki-client.org